Codeflist

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Codeflist records in CISA KEV

No Codeflist vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2021-03311 CVE-2021-4455 · GHSA-f33h-gm37-5r83

Wordpress Plugin Smart Product Review <= 1.0.4 - Unauthenticated Arbitrary File Upload

MEDIUM 50

The Wordpress Plugin Smart Product Review plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.0.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00807 Published 2025-04-19 No fix listed CWE-434

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0